Privacy Policy

This policy explains what data The Poker Dojo collects, why we collect it, who we share it with, and the rights you have over it. We’ve tried to keep it plain and honest. If anything is unclear, email us at support@thepokerdojo.com.

1. Who we are (data controller)

The Poker Dojo is a small, independent educational project operated from the United Kingdom. For the purposes of UK GDPR and EU GDPR, we are the data controller for the personal data described here. You can contact us about any privacy matter at support@thepokerdojo.com.

2. What data we collect, and why

We keep the data we collect deliberately small:

• Account details — your email address and a password. The password is hashed by our authentication provider; we never store it in plaintext and cannot see it. We use this to create your account, sign you in, and contact you about the Service.
• Training data — the hands you play in the simulator, your graded decisions, your stats, your progress, and your XP and belts. We use this to run the Service: to track your improvement, show your results, and grade your play.
• Hand-history text you paste (optional) — if you choose to paste hand-history text for analysis, we process it to generate that analysis for you. You only ever share this if you decide to.

We don’t collect payment information (there’s nothing to pay for), and we don’t run advertising or behavioural tracking.

3. Legal bases for processing

Under UK and EU GDPR, we rely on the following legal bases:

• Contract — to provide the Service you’ve asked for: creating and securing your account, and saving your training progress.
• Legitimate interests — to keep the Service secure, reliable, and free from abuse, and to understand how it’s used so we can improve it, in a way that respects your rights.
• Consent — for optional features you actively choose to use, such as pasting hand-history text for analysis or using the AI coach. You can withdraw consent at any time by not using those features.

4. The AI coach: how your data flows

The AI coach is optional. When you ask it for coaching, we send your aggregated stats for a single stake to Anthropic (through the Vercel AI Gateway) so it can generate coaching text. We do not send your email, your account identifiers, or anything that identifies you personally — only the aggregated numbers needed to produce the coaching. If you never use the AI coach, none of your data is sent for this purpose.

5. Sub-processors and third parties

We use a few trusted service providers to run the Service. They process data on our behalf, under contract:

• Supabase — authentication and our Postgres database, where your account and training data are stored. This data is hosted in the EU / London region.
• Vercel — application hosting and content delivery (the platform that serves the website to you).
• Anthropic, accessed via the Vercel AI Gateway — generates the optional AI coach text from aggregated, non-identifying stats, as described above.

We don’t sell your data, and we don’t share it with advertisers.

6. Cookies

We use only strictly-necessary cookies — specifically the cookie that keeps you signed in (your authentication session). We do not use advertising cookies, third-party tracking cookies, or analytics that profile you across sites. Because these cookies are essential to the Service working, they don’t require consent under the rules, but we want you to know exactly what’s there.

7. Data retention

We keep your account and training data for as long as your account is active, so your progress is there when you come back. When you delete your account, your data is permanently removed. Hand-history text you paste is processed to produce your analysis and is not kept for any longer than needed to provide that feature. We may keep minimal records where the law requires us to.

8. Your rights under UK and EU GDPR

You have the right to:

• Access — get a copy of the personal data we hold about you;
• Rectification — have inaccurate data corrected;
• Erasure — have your data deleted;
• Portability — receive your data in a portable format you can take elsewhere;
• Objection and restriction — object to or restrict certain processing, including processing based on our legitimate interests.

We’ve built two of these right into the app, so you’re always in control: from your /account page you can export all of your data at any time, and delete your account and all of your data at any time. For anything else, just email us and we’ll help.

9. How to contact us or complain

For any privacy question or to exercise a right, email support@thepokerdojo.com. If you’re in the UK and you’re not satisfied with how we’ve handled your data, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk. If you’re in the EU, you can complain to your local data protection authority. We’d appreciate the chance to put things right first, though.

10. Children

The Poker Dojo is for adults learning poker strategy and is not intended for anyone under 18. We don’t knowingly collect data from under-18s. If you believe a minor has created an account, contact us and we’ll remove it.

11. Changes to this policy

We may update this policy as the Service evolves or to reflect legal changes. When we do, we’ll update the “Last updated” date at the top of this page, and we’ll flag significant changes where we reasonably can.

12. Contact

We’re happy to answer anything about your privacy. Reach us at support@thepokerdojo.com.